Sparrow Labs

Cybersecurity and privacy advisor for content creators, he/him. DM or email for all inquiries! [email protected]

[Sparrow Labs @TheLabSparrow]

Hi everyone! I'm Jim, a cybersecurity professional with 10 years of experience looking to help advise and work with folks in the content creator and VTuber spaces. Mainly focused on preventing doxxing and hacking as well as improving one's personal privacy online.

[Zach Bussey 🇨🇦 @zachbussey]

No, Twitch is not issuing any kind of reimbursement.

This is a scam that appears to have vastly expanded over the last 48 hours.

[🩷💜💙 🍉OTTERBOY 𝐯𝐬 ℋ𝒜𝒞𝒦ℰℛ𝒜🫟🩷🩵💛 @OtterBoy_VA]

So the hacker made it so that I'm their child, and I can't move on with the account recovery unless I rhave THEIR password. Lest someone has any ideas, I don't think I'm getting back into my own account🫩

[Sparrow Labs @TheLabSparrow]

@afoxinthetree Would love to help out with this, send me a link to join!

[Sparrow Labs @TheLabSparrow]

In case anyone is wondering: there is no risk to any personal information or payment details due to this hack. The only risk is if you copy pasted anything into Windows Run as part of the ClickFix attack. Outside of that your private information is safe.

[Sparrow Labs @TheLabSparrow]

This has been fixed, huge thanks to San Japan for the quick action taken! Can't wait to attend the con and (hopefully) get selected for my panel.

[Sparrow Labs @TheLabSparrow]

Found the source of this, somehow within the last 5 days via (most likely) a vulnerable WordPress plugin was injected into the HTML head. Loads some obfuscated code and also leaks IP and useragent to whoever the hell is operating this almontm domain.

[Sparrow Labs @TheLabSparrow]

@SanJapan Found the files and updated here, San Japan contacted as well: https://t.co/53e8dKEP3n

[Sparrow Labs @TheLabSparrow]

Found the source of this, somehow within the last 5 days via (most likely) a vulnerable WordPress plugin was injected into the HTML head. Loads some obfuscated code and also leaks IP and useragent to whoever the hell is operating this almontm domain.

[Sparrow Labs @TheLabSparrow]

PSA for anyone attending San Japan: it seems their website is compromised with a ClickFix attack. Just had this pop up when browsing on there. Haven't been able to get it to pop back up again but I can confirm it happened. Do not copy paste ANYTHING from a popup like this.

[Sparrow Labs @TheLabSparrow]

@SanJapan fyi, will submit a contact form with details soon too

[Sparrow Labs @TheLabSparrow]

Snippet of the obfuscated code at that file.js. I'm reaching out immediately to the San Japan organizers to get this removed.

[Sparrow Labs @TheLabSparrow]

Found the source of this, somehow within the last 5 days via (most likely) a vulnerable WordPress plugin was injected into the HTML head. Loads some obfuscated code and also leaks IP and useragent to whoever the hell is operating this almontm domain.

[Sparrow Labs @TheLabSparrow]

PSA for anyone attending San Japan: it seems their website is compromised with a ClickFix attack. Just had this pop up when browsing on there. Haven't been able to get it to pop back up again but I can confirm it happened. Do not copy paste ANYTHING from a popup like this.

[Sparrow Labs @TheLabSparrow]

@Staggiezz 100% a phishing scam, that "Login" button won't even go to Twitch but instead to some other spoofed credential harvesting lookalike site for stealing folks passwords, MFA codes, session replay / token theft etc... all an unfortunately common tactic

[Staggiez @Staggiezz]

Just a little heads up for streamers.

There seems to be a new scam going around that I just got this morning. 😐

They can bite my shite.

[Sparrow Labs @TheLabSparrow]

@SilvaniKillian Hey Silvani sent you a DM about some of the stuff you discovered, just FYI

[VTuber NewsDrop 💧 @VTuberNewsDrop]

Current NewsDrop research shows several VTubers have had their songs included in a recently-discovered dataset by The Atlantic's AI Watchdog. This means that songs from select VTubers are most likely prone to being synthesized into AI-generated tracks. [🔗 in 💬]

[Ivy🪴✨(Mama Moth) @IvyHoneyFig]

Please do not accidentally doxx yourself!

Youtube now has a feature to show who shared you a video when you open up the link!
So if you want to be safe, make sure to turn this setting off 🫶

[Inkfy @inkfycreates]

As a reminder, invest in an external drive as an artist. Don't leave all of your work on your tablet, computer, or phone.

[( ´･ω･` )🌱 @denkobean]

Uniqso customers are receiving this email that has their personal information included in it. The company claims to be affiliated with them. Nothing is being charged on cards but some people are being spammed with texts as well.

[Sparrow Labs @TheLabSparrow]

You can also usually disable the "show my profile when sharing links" setting on most apps, but it's best to make a habit of removing tracking anyway. Additionally Some sites like TikTok make this a bit more difficult to do, here's a guide I posted: https://t.co/BfSovvKsTl

[Sparrow Labs @TheLabSparrow]

TikTok bakes in the tracking link every time you try to share something. This requires an extra step to remove the tracking which I have outlined here! This way you don't accidentally reveal a personal profile when sharing content. (2/3)

[Sparrow Labs @TheLabSparrow]

Always sanitize your links and remove tracking before sharing! Don't accidentally dox yourself.

[normie 𓆏🦔 @KellytoyDK]

youtube has unveiled a bold new feature: doxxing people